Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d7e8fb9-5eed-3f9b-ae3e-967822c365ad.roa
File:                     5d7e8fb9-5eed-3f9b-ae3e-967822c365ad.roa (raw, json)
Hash identifier:          9q3mAYfzGFID7R4A57VAklH7khi0S1MFIUCRT8vZJ74=
Subject key identifier:   C8:20:0E:02:A5:71:04:70:4E:9C:53:3C:2C:F3:AD:A5:3B:8D:53:A8
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328583CE43364DD01F4961B2C818980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d7e8fb9-5eed-3f9b-ae3e-967822c365ad.roa
Signing time:             Fri 11 Feb 2022 05:00:00 +0000
ROA not before:           Fri 11 Feb 2022 05:00:00 +0000
ROA not after:            Fri 18 Mar 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        18.136.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e4:33:64:dd:01:f4:96:1b:2c:81:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Feb 11 05:00:00 2022 GMT
            Not After : Mar 18 04:00:00 2022 GMT
        Subject: CN=e4d8e421-6551-4b52-adea-f621d64c9865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:23:77:b5:bc:86:a5:73:c3:b4:e0:c6:ca:1a:
                    59:b3:08:b5:e3:8d:9a:51:92:85:4c:dc:58:b8:e7:
                    07:95:7e:51:ed:75:4d:62:8d:70:c3:cf:8e:77:ad:
                    eb:74:af:b8:7e:e2:ec:e8:be:7a:97:b3:20:1b:17:
                    5a:8d:9f:19:9f:4a:a2:c5:ef:47:ff:0a:1f:b3:b6:
                    86:e3:d8:fc:2f:43:8c:6e:a1:98:e4:3e:12:8f:6c:
                    fa:98:32:8a:54:1f:1f:dc:14:48:56:c3:64:f6:c5:
                    87:4a:ee:1d:d2:9e:75:33:ff:89:f2:09:95:0b:c6:
                    eb:b2:aa:07:05:45:be:71:91:57:3e:43:c1:c5:a0:
                    02:bb:f2:a2:d8:bc:73:bc:63:4d:1d:eb:61:11:0b:
                    ac:f9:9f:d8:81:b0:fd:be:95:16:79:5b:58:64:73:
                    18:68:a6:3b:53:93:19:d0:86:69:98:81:00:8a:07:
                    da:37:82:00:47:ef:22:33:c4:09:7e:2d:53:f8:c5:
                    77:c4:06:a8:2b:84:42:2e:8b:a5:34:50:c8:22:a5:
                    e8:d7:03:23:16:7c:13:82:d2:e8:0d:83:3b:01:9b:
                    2a:f9:c1:cc:dd:ce:9a:99:d8:a7:25:1b:f8:91:58:
                    e1:63:23:7c:5b:6f:07:cf:3a:f1:3c:1d:c2:cf:57:
                    cd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:20:0E:02:A5:71:04:70:4E:9C:53:3C:2C:F3:AD:A5:3B:8D:53:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5d7e8fb9-5eed-3f9b-ae3e-967822c365ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.136.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:60:e5:f1:f4:4a:6e:6b:24:16:d6:d0:92:d2:67:5d:f5:af:
         60:a8:19:51:0d:1b:10:f7:fe:c9:15:7b:18:f1:2f:49:7d:36:
         c7:d9:55:46:2b:f4:fe:3c:b5:ed:88:6e:7b:8c:8a:a7:51:bf:
         1a:0b:5c:e6:be:9b:64:86:72:c6:9d:7f:41:90:b2:f0:93:dc:
         81:bc:fc:89:83:1a:e9:24:34:74:71:7d:eb:81:8b:e6:64:09:
         c6:c1:0f:df:01:3a:fd:ea:e4:f1:10:60:bc:0b:64:ad:a6:c6:
         0c:fc:51:06:14:fd:d7:a6:e4:1f:c7:94:25:b8:60:11:6e:2b:
         c1:31:d1:1f:ee:a5:a7:07:f0:46:19:12:24:a8:b3:12:60:40:
         c5:9a:83:62:3c:7c:82:fb:0f:6d:1e:8b:62:80:73:04:d0:5a:
         25:3c:7c:0a:11:9c:1a:25:f2:dd:d6:89:f1:3d:78:95:b3:ba:
         81:e6:98:87:e7:85:98:e6:84:62:3d:a7:75:66:52:63:45:6c:
         11:4f:93:44:d2:90:4c:80:14:9d:5e:a9:bc:11:c4:1f:ee:a0:
         d8:31:a6:3e:50:e6:ac:59:a4:c6:36:7d:83:2f:ba:f3:2a:3c:
         5c:96:0a:fd:aa:eb:5e:be:3e:62:1f:f3:0c:d5:d7:a1:75:da:
         89:55:81:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:16:05 2025 by rpki-client